its simple group and user relationship , but through application which is interacting with spice db with help of fga library Relationship groupUserRelationship = new Relationship(RelationsEnum.GROUP.toString(), groupCode, RelationsEnum.GROUP_MEMBER.toString(), RelationsEnum.USER.toString(), userId); definition tenant { relation employee: user } definition user {} definition group { relation group_member: user | group#group_member relation tenant_name: tenant}